General
- Target MEMZ-Destructive.zip
- Size 8KB
- Sample260913-qeqe3athrh
- SHA256 8c19ca3a8b76d47b29de2776def65388f894c77360ebb159168088ab458a3458
- MD5 6954dec2f5777ae50baf02377b2bd901
- SHA1 dd049cd18e667e17d59a94a890998e94f52dbe6a
- SHA512 596c50ea6677b4fd0e635ba4ffea5594edaacd341051186ec8ed250cd937e511534eced58771d53a3d77779b8142c943648f1cd2928777f8350372003781ba96
- SSDEEP 192:zxKgD1ff+OZxXdj5dUKd5aJ9HK9rMetbTRew:zxKgF3XB5dL5aJ9HK9rltbTRJ
- TLSH T1FB02AF0346005CABE644AAA71688FE0A7FF736DB6B4F16875F97236700A82C088B5D61
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MEMZ-Destructive.exe
Resource
win10v2004-20260911-en
26 signatures
900 seconds
Behavioral task
behavioral2
Sample
MEMZ-Destructive.exe
Resource
win11ltsc2024-20260911-en
19 signatures
900 seconds
Malware Config
Targets
-
- Target MEMZ-Destructive.exe
- Size 14KB
- SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
- MD5 19dbec50735b5f2a72d4199c4e184960
- SHA1 6fed7732f7cb6f59743795b2ab154a3676f4c822
- SHA512 aa8a6bbb1ec516d5d5acf8be6863a4c6c5d754cee12b3d374c3a6acb393376806edc422f0ffb661c210e5b9485da88521e4a0956a4b7b08a5467cfaacd90591d
- SSDEEP 192:sIvxdXSQeWSg9JJS/lcIEiwqZKBkDFR43xWTM3LHn8f26gyr6yfFCj3r:sMVSaSEglcIqq3agmLc+6gyWqFCj
- TLSH T180624BCFBE204417D8F0C57530659234DFBACABA1B968EDF9CF91E529AC4C072823265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory